GEPA Energy Leadership Academy

Close menu

Policies

Privacy

What the academy collects about you, why it holds it, who else sees it, and how to get it back or have it erased.

Last updated 7 November 2026 · Applies to GEPA Energy Leadership Academy

This policy is not ready to publish

It cannot yet name the registered entity name, the RC registration number or a registered postal address. Fill these in under Settings → Identity before launch.

It also needs review by a Nigerian legal practitioner. This text is a starting point written against NDPR and general practice, not legal advice.

What we collect

When you create an account we hold your name, email address, and — if you choose to give them — your phone number, employer, professional title and location. Your name is what prints on a certificate, so it is held exactly as you write it.

As you study we record which lessons you have opened and completed, how much of each recording you have watched, your answers and scores on assessments, work you submit for review, notes you write, and questions you ask. This is what a certificate is issued against, so it has to be accurate.

When you buy something we hold the amount, the currency, the reference and the outcome. We do not hold your card number. Card details are entered on Paystack's own page and never reach this platform.

Why we hold it

  • To run your account and deliver the courses you enrolled on. Without this there is no service to provide.
  • To assess you and issue credentials. A certificate that cannot be traced to completed work is worthless, so the record behind it is kept.
  • To take payment and keep the financial record that Nigerian tax and company law requires us to keep.
  • To answer you when you write to us.

Who else sees it

Paystack processes payments and receives your name, email and the amount.

Google (YouTube) serves the lesson recordings. Playing a lesson contacts Google's servers and Google may set cookies on your device under its own policy.

Your employer, if you were enrolled through an organisation. Their nominated manager can see that you are a member, which courses you are on, and your completion status. They cannot see your notes, your questions, or your individual answers.

We do not sell your data, and we do not share it for advertising.

What is public

Certificate verification is deliberately public and needs no account, because a credential nobody can check is not a credential. Anyone holding a certificate number can see four things and no more: the holder's name, the course, the date of issue, and whether it is still valid.

Nothing else is disclosed there — not your email, not your scores, not your coursework.

How long we keep it

  • Your account and study record — while your account is open.
  • Certificates — indefinitely, so verification links keep working. This survives closing your account.
  • Payment records — for as long as the law requires us to keep them, which is currently six years.
  • Messages you send us — until the matter is closed and no longer needed.

Your rights

Under the Nigeria Data Protection Act you can ask us for a copy of what we hold about you, ask us to correct it, ask us to erase it, or object to how we use it.

You can change your name, email and password yourself under your account. Closing your account there erases your name and contact details and deletes your progress, notes and questions. Your certificates stay verifiable and the payment record is kept, for the reasons above.

For anything else, write to us. We answer within 30 days. If you are not satisfied you can complain to the Nigeria Data Protection Commission.

Cookies

This platform sets one cookie of its own: the session cookie that keeps you signed in. It is not used for advertising or tracking, and the site does not work without it.

Playing a lesson loads a YouTube player, which may set cookies of Google's own.

Security

Passwords are stored hashed and are never visible to us. If a breach occurs that puts you at risk we will tell you and the Commission.